Senior SOC Engineer

JOB OPPORTUNITY:

Support cybersecurity operations by designing, developing, or recommending secure technical solutions, including policy, standards, applications, systems, architectures, and infrastructure to build a security operations center. Ensure appropriate application of security products and technologies to protect the organization’s systems and information and enable the achievement of the organization’s objectives. Manage and design innovative integration of cybersecurity toolsets to enable more automated discovery, remediation, and alerting of network and device vulnerabilities, as a means of improving the security posture. Perform analysis of emerging technologies and design and build architectures and solutions to enable secure implementation of new technologies.

RESPONSIBILITIES:

• Build out a state-of-the-art security operation center responsible for monitoring and investigating security alerts from multiple sources
• They will also be responsible for investigating any incidents that occur and providing recommendations on how to prevent them from happening again in the future
• Develop strategies, policies, and standards for the security operations center
• Responsible for defining improvements to the program, and implementing new technologies, tools, metrics, and standards
• Building custom software integrations between various security tools

REQUIRED QUALIFICATIONS:

• Bachelor’s Degree with a minimum of 5 – 10 years of experience
• Experience as a lead or manager of a security operations center
• Experience both investigating incidents, and providing prevention recommendations
• Programming Python experience
• Experience with SIEMs and EDR tools such as Elastic Search, Splunk, Crowdstrike, Elastic Endgame, and Windows Defender
• Experience with cloud providers such as AWS, Azure, GCP, and cloud-native security tools CSPM, SecurityHub and GuardDuty

PREFERRED EXPERIENCE:  

• Possess at least one cybersecurity certification such as CISSP, GIAC, or similar
• MITRE ATT and CK framework a plus
• Experience creating strategies and plans for the cybersecurity team
• Experience in a SOC for hosted applications/products